01 Record

CVE-2026-31498

Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-22 13:54Z4 MO AGO

Last updated

2026-05-23 16:05Z3 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base
CWE-606Unchecked Input for Loop ConditionBase

Data version

5.2

Document digest

ec11f0c6a6ee1034a64c5bd658554e86497e368524f12835eccea120bf0cb183

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux96298f640104e4cd9a913a6e50b0b981829b94ff to < 9760b83cfd24b38caee663f429011a0dd6064fa9, 96298f640104e4cd9a913a6e50b0b981829b94ff to < de37e2655b7abc3f59254c6b72256840f39fc6d5, 96298f640104e4cd9a913a6e50b0b981829b94ff to < e7aab23b7df89a3d754a5f0a7d2237548b328bd0, 96298f640104e4cd9a913a6e50b0b981829b94ff to < 52667c859fe33f70c2e711cb81bbd505d5eb8e75, 96298f640104e4cd9a913a6e50b0b981829b94ff to < 9a21a631ee034b1573dce14b572a24943dbfd7ae, 96298f640104e4cd9a913a6e50b0b981829b94ff to < 900e4db5385ec2cacd372345a80ab9c8e105b3a3, 96298f640104e4cd9a913a6e50b0b981829b94ff to < 042e2cd4bb11e5313b19b87593616524949e4c52, 96298f640104e4cd9a913a6e50b0b981829b94ff to < 25f420a0d4cfd61d3d23ec4b9c56d9f443d91377, 4ad03ff6f680681c5f78254e37c4c856fa953629, b7d0ca715c1008acd2fc018f02a56fed88f78b75, 799263eb37a4f7f6d39334046929c3bc92452a7f, 8828622fb9b4201eeb0870587052e3d834cfaf61, b432ea85ab8472763870dd0f2c186130dd36d68c, 4.4.238 to < 4.5, 4.9.238 to < 4.10, 4.14.200 to < 4.15, 4.19.149 to < 4.20, 5.4.69 to < 5.5, 5.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9760b83cfd24b38caee663f429011a0dd6064fa9
git.kernel.orghttps://git.kernel.org/stable/c/de37e2655b7abc3f59254c6b72256840f39fc6d5
git.kernel.orghttps://git.kernel.org/stable/c/e7aab23b7df89a3d754a5f0a7d2237548b328bd0
git.kernel.orghttps://git.kernel.org/stable/c/52667c859fe33f70c2e711cb81bbd505d5eb8e75
git.kernel.orghttps://git.kernel.org/stable/c/9a21a631ee034b1573dce14b572a24943dbfd7ae
git.kernel.orghttps://git.kernel.org/stable/c/900e4db5385ec2cacd372345a80ab9c8e105b3a3
git.kernel.orghttps://git.kernel.org/stable/c/042e2cd4bb11e5313b19b87593616524949e4c52
git.kernel.orghttps://git.kernel.org/stable/c/25f420a0d4cfd61d3d23ec4b9c56d9f443d91377

01 Record index

CVE-2026-31498

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31498

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References